@things-factory/board-import 10.1.28 → 10.1.31

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/board-import",
-  "version": "10.1.28",
+  "version": "10.1.31",
   "main": "dist-server/index.js",
   "things-factory": true,
   "author": "heartyoh",
@@ -23,13 +23,13 @@
   },
   "dependencies": {
     "@operato/graphql": "^10.0.0",
-    "@things-factory/ai-client-base": "^10.1.28",
-    "@things-factory/attachment-base": "^10.1.28",
-    "@things-factory/auth-base": "^10.1.28",
-    "@things-factory/board-service": "^10.1.28",
+    "@things-factory/ai-client-base": "^10.1.31",
+    "@things-factory/attachment-base": "^10.1.31",
+    "@things-factory/auth-base": "^10.1.31",
+    "@things-factory/board-service": "^10.1.31",
     "@things-factory/env": "^10.1.20",
-    "@things-factory/shell": "^10.1.28",
+    "@things-factory/shell": "^10.1.31",
     "dxf-parser": "^1.1.2"
   },
-  "gitHead": "3a260a0f79bc6b41a692a103955bfcc541aff60e"
+  "gitHead": "5213e6f9913b40ea2618a2111d9884b792dbaa01"
 }

package/server/service/import-tools-privilege.test.ts

@@ -42,6 +42,12 @@ const ARGS: Record<keyof typeof IMPORT_TOOL_PRIVILEGE, any> = {
   getImportSession: { sessionId: 's1' },
   materializeImportSession: { sessionId: 's1', name: 'New' }
 }
+/** 도구가 지나는 문 — 등록기의 `doors`, 그리고 아래 「표가 문과 같은가」가 읽는 필드 이름. */
+const DOOR: Record<keyof typeof IMPORT_TOOL_PRIVILEGE, string> = {
+  importBoardAsync: 'Mutation.importBoardAsync',
+  getImportSession: 'Query.importSession',
+  materializeImportSession: 'Mutation.materializeImportSession'
+}
 const EFFECT: Record<keyof typeof IMPORT_TOOL_PRIVILEGE, jest.Mock> = {
   importBoardAsync: mockStartImportJobAsync,
   getImportSession: mockFetchImportSession,
@@ -73,22 +79,24 @@ describe.each(Object.keys(IMPORT_TOOL_PRIVILEGE) as (keyof typeof IMPORT_TOOL_PR
     expect(EFFECT[tool]).toHaveBeenCalled()
   })
 
-  test('declares the same privilege on the spec, for doors that decide what to offer', () => {
+  /*
+   * 무엇을 **내보낼지**는 2026-09-18 부터 문이 정한다(ADR-0071 결정 2). 명세가 권한을 베껴 적는 대신
+   * 닿는 문을 적고, 관문이 그 필드의 지시자를 AUTH 의 표에서 읽는다. 여기 적힌 문 이름이 틀리면 그
+   * 도구는 어느 대화에도 안 나간다 — 조용히.
+   */
+  test('names the door it reaches, so the gate can ask that door what it requires', () => {
     const spec: any = findToolSpec(tool)
-    expect(spec.privilege).toBe(IMPORT_TOOL_PRIVILEGE[tool])
+    expect(spec.doors).toEqual([DOOR[tool]])
+    expect(spec.privilege).toBeUndefined()
   })
 })
 
 test('the table says what the GraphQL doors say', () => {
   const resolver = readFileSync(join(__dirname, 'import-session', 'import-session-resolver.ts'), 'utf8')
-  const DOOR: Record<keyof typeof IMPORT_TOOL_PRIVILEGE, string> = {
-    importBoardAsync: 'importBoardAsync',
-    getImportSession: 'importSession',
-    materializeImportSession: 'materializeImportSession'
-  }
   for (const [tool, door] of Object.entries(DOOR) as [keyof typeof IMPORT_TOOL_PRIVILEGE, string][]) {
+    const field = door.split('.')[1]
     const m = resolver.match(
-      new RegExp(`@Directive\\('@privilege\\(category: "([^"]+)", privilege: "([^"]+)"\\)'\\)\\s*async ${door}\\(`)
+      new RegExp(`@Directive\\('@privilege\\(category: "([^"]+)", privilege: "([^"]+)"\\)'\\)\\s*async ${field}\\(`)
     )
     expect(m).not.toBeNull()
     expect({ category: m![1], privilege: m![2] }).toEqual(IMPORT_TOOL_PRIVILEGE[tool])

package/server/service/import-tools.ts

@@ -84,9 +84,13 @@ function requireDomainContext(state: any): { domain: any; user: any } {
  * `ai-assistant:mutation` — could create a Board through it.
  *
  * The check lives in the builder rather than in whichever chat door dispatches the tool: there is
- * more than one such door, and the effect has to be guarded wherever it is reached from. The same
- * object is also declared on the spec as `privilege`, which is what a door reads to decide whether
- * to offer the tool at all; declaring and enforcing from one constant keeps the two from drifting.
+ * more than one such door, and the effect has to be guarded wherever it is reached from.
+ *
+ * Whether the tool is **offered** at all is a separate question, and since 2026-09-18 the spec does
+ * not answer it with a copy of this object (ADR-0071 decision 2). The spec names the GraphQL doors
+ * it reaches and the gate resolves each one against that field's own `@privilege` — the same
+ * declarations this constant mirrors (`import-session-resolver.ts`). This constant stays because it
+ * guards the **effect**, which is reached from more places than the offering.
  */
 export const IMPORT_TOOL_PRIVILEGE = {
   importBoardAsync: { category: 'board-import', privilege: 'mutation' },
@@ -134,6 +138,8 @@ const importToolsCategory: ToolCategory = {
     {
       kind: 'read',
       name: 'listImportAdapters',
+      /* 등록된 어댑터를 그 자리에서 셀 뿐이다 — 저장소에 닿지 않으므로 지나는 문이 없다. */
+      doors: [],
       description:
         '등록된 도면 import 어댑터 (DXF / Image / 향후 IFC, glTF 등) 의 능력 조회. ' +
         '사용자가 어떤 형식 import 가 가능한지 묻거나, LLM 이 적절한 어댑터 선택을 inspect 할 때 사용.',
@@ -149,7 +155,7 @@ const importToolsCategory: ToolCategory = {
     {
       kind: 'external',
       name: 'importBoardAsync',
-      privilege: IMPORT_TOOL_PRIVILEGE.importBoardAsync,
+      doors: ['Mutation.importBoardAsync'],
       description:
         'Attachment(도면/조감도/사진) 을 비동기로 보드 모델로 변환 시작. 즉시 ImportSession 을 ' +
         '반환하고 백그라운드에서 진행. status 가 completed 가 될 때까지 getImportSession 으로 ' +
@@ -201,7 +207,7 @@ const importToolsCategory: ToolCategory = {
     {
       kind: 'read',
       name: 'getImportSession',
-      privilege: IMPORT_TOOL_PRIVILEGE.getImportSession,
+      doors: ['Query.importSession'],
       description:
         'ImportSession 의 진행/결과 조회. status 가 queued/parsing/mapping/assembling/binding 인 ' +
         '동안은 progress 와 message 를 반환, completed 면 result.boardModel 까지 포함. failed 면 ' +
@@ -237,7 +243,7 @@ const importToolsCategory: ToolCategory = {
     {
       kind: 'external',
       name: 'materializeImportSession',
-      privilege: IMPORT_TOOL_PRIVILEGE.materializeImportSession,
+      doors: ['Mutation.materializeImportSession'],
       description:
         '완료된 ImportSession 의 결과 boardModel 을 새 Board entity 로 영속화. status 가 ' +
         'completed 인 세션만 처리. 결과 Board 는 state="draft" 로 생성되므로 사용자가 검수 후 ' +